Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit（ユーザ名マップスクリプト） このリポジトリには、Sambaサーバ（バージョン3.0.20～3.0.25rc3）における脆弱性 CVE-2007-2447 の悪用を自動化するPythonスクリプトが含まれています。このツールは、教育目的 および許可された侵入テストのためにのみ開発されています。 📝 技術的・学術的説明 「ユーザ名マップスクリプト」 の脆弱性は、Samba設定で username map script オプションが有効になっている場合に、ユーザ名入力のサニタイズが欠如しているために発生します。シェルのメタ文字（バッククォ...

CVE-2026-90529

A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/charts/map/symbolic-map.ts of the component Symbolic Map. Such manipulation of the argument...

EUVD-2026-77031

A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/charts/map/symbolic-map.ts of the component Symbolic Map. Such manipulation of the argument...

CVE-2026-90529 DataEase Symbolic Map symbolic-map.ts buildTooltip cross site scripting

A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/charts/map/symbolic-map.ts of the component Symbolic Map. Such manipulation of the argument...

CVE-2026-90529

DataEase versions up to 2.10.25/2.10.26 are affected by a Cross-Site Scripting (XSS) vulnerability in the Symbolic Map component. The flaw resides in the buildTooltip function within symbolic-map.ts (frontend chart panel), where manipulation of the argument canvasViewInfo[*].customAttr.tooltip.ba...

CVE-2026-90529 DataEase Symbolic Map symbolic-map.ts buildTooltip cross site scripting

A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/charts/map/symbolic-map.ts of the component Symbolic Map. Such manipulation of the argument...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

CVE-2026-41729

CVE-2026-41729: Spring Data REST JSON Patch Map Key SpEL Injection PoC 此存储库是Spring官方安全公告公开的 CVE-2026-41729 的最小复现PoC。 官方公告：https://spring.io/security/cve-2026-41729/ 官方标题：Spring Data REST SpEL Injection via Map Key in JSON Patch 严重级别：High CVSS v3.1：AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 公开日期：2026-06-...

POC-GeoLeak-CVE-2026-52715

GeoLeak — PoC for CVE-2026-52715 Educational Proof of Concept for GeoLeak CVE-2026-52715, an unauthenticated SQL injection CVSS 9.3 in the GEO my WordPress = 4.5.5 plugin for WordPress. The swlatlng and nelatlng map boundary parameters are interpolated without sanitization into the WHERE clause...

CVE-2007-2447

CVE-2007-2447 - username map script "The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows...

CVE-2026-78159

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the issafewidgetinstance objec...

PsyloDbg

PsyloDbg PsyloDbg is a fast-growing and user-friendly open-source Windows Debugger entirely coded in Delphi. The main goal of this project is to offer to Malware analysts another tool to short their response time during their analysis process. The project is still in very early stage, it is...

CVE-2026-72898

Notice to Toucan2 behavior and map without :closed true...

Linux Distros Unpatched Vulnerability : CVE-2026-89650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads numexporttargets from each per-mds info record and advances the...

Linux Distros Unpatched Vulnerability : CVE-2026-89656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from...

Linux Distros Unpatched Vulnerability : CVE-2026-89644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all...

CVE-2026-89656

A flaw was found in libceph within the Linux kernel. This vulnerability allows a local attacker to craft a malformed CRUSH map, which is used for data placement. By doing so, one data bucket can be made to reuse another bucket's memory workspace, leading to an out-of-bounds write. This memory...

CVE-2026-89657

A flaw was found in libceph in the Linux kernel. A malicious or compromised authenticated Ceph Object Storage Device OSD peer could send a specially crafted sparse-read reply that lacks proper validation of extent maps. This could cause the client to advance its message-data cursor beyond the...

CVE-2026-50013

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the AddDiff function writes to the shared responsesDiff map without any synchronization no mutex. When multiple proxy requests are processed concurrently the normal case for any proxy,...

Driver-kaldereta

Kaldereta Unsigned Kernel Mode Driver that does memory modifications Features get process id get base address of an image change protection of a memory region allocate memory region free memory read/write from address read/write from address with offset read from memory to buffer write to memory...